Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-9803

ssl-context attr desc - add mention that unwrapped SslContext is needed for HTTP/2

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Minor
    • None
    • 7.1.0.DR14
    • Security, Undertow
    • User Experience

    Description

      There has been introduced a new attribute for Elytron server-ssl-context - 'wrap', which is required to be set to false when using such SslContext with Undertow https-listener and utilizing HTTP/2. Currently default value of that attribute is 'true' but since EAP7.1.0.DR15 the default should change to 'false'.

      Even though the default value of the 'wrap' attribute will be ok, I think that we should still provide information (maybe with brief explanation?) right in the description of "ssl-socket" attribute in "https-listener" that it requires 'writable' form of SslContext provided by Elytron subsystem now. It will be more visible to customer and might avoid some misunderstandings I think.

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-9689 Update docs about how to set HTTPs + Elytron + HTTP2

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-5942 Elytron + https-listener in undertow listener doesn't work with enable-http2 set to "true"

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified

          Requirement - Used for conducting internal reviews of our products and process with 3rd party auditors JBEAP-7164 Elytron integration with the Undertow subsystem

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              Unassigned Unassigned
              jstourac@redhat.com Jan Stourac
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: